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Claims 

[d] 1. A digital rights client for decoding a digital rights key, 
the digital rights key having permission information, a 
security parameter index and a digital signature, the 
digital rights client comprising: 

a digital signature calculation block operative to receive 
the permission information and the security parameter 
index from a received digital rights key and to calculate 
a reference digital signature based on the permission in- 
formation and the security parameter index; and 
a comparitor operatively coupled to the digital signature 
calculation block to validate the digital rights key by 
comparing at least the digital signature received from 
the digital rights key with the reference digital signature 
from the digital signature calculation block. 

[c2] 2. A digital rights client according to claim 1, 

wherein the comparitor generates a validation indication; 
and 

wherein the digital rights client further comprises an in- 
terpreter operatively coupled to the comparitor to inter- 
pret the permission information received in the digital 
rights key and to grant use of digital rights based on the 



validation indication in accordance with contents of the 
permission information. 

[c3] 3. A digital rights client according to claim 2, 

wherein the digital rights key has permission information 
in clear text; and 

wherein the interpreter interprets the clear text to grant 
use of digital rights based on the validation indication. 

[c4] 4. a digital rights client according to claim 2, 

wherein the permission information of the digital rights 
key comprises a destination identifier; and 
wherein the interpreter grants use of particular feature 
ID digital rights based on the validation indication and a 
comparison of the destination identifier. 

[c5] 5. A digital rights client according to claim 2, 

wherein the permission information of the digital rights 
key comprises a feature ID and a number of feature 
units; and 

wherein the interpreter grants use of particular feature 
ID digital rights based on the validation indication and a 
comparisons of the feature ID and a number of feature 
units. 

[c6] 6. A digital rights client according to claim 2, 

wherein the permission information of the digital rights 



key comprises a type designation; and 
wherein the interpreter grants use of particular feature 
ID digital rights based on the validation indication and a 
comparison of the type designation. 

[c7] 7. A digital rights client according to claim 1, wherein 
the comparitor is operatively coupled to the digital sig- 
nature calculation block to validate the digital rights key 
by comparing the digital signature received from the 
digital rights key and the reference digital signature from 
the digital signature calculation block. 

[c8] 8. A digital rights client according to claim 7, 

wherein the digital rights key has permission information 
in clear text; and 

wherein the interpreter interprets the clear text to grant 
use of digital rights based on the validation indication. 

[c9] 9. A digital rights client according to claim 1, further 
comprising an XML decoder operatively coupled to the 
digital signature calculation block and the comparator to 
identify XML tags and parse the digital rights key into the 
permission information for the digital signature calcula- 
tion block, the security parameter index for the digital 
signature calculation block, and the digital signature in 
the digital rights key for the comparator. 



[do] 10. A digital rights key, comprising: 

a permission information portion for identifying digital 
rights permitted by the digital rights key; 
a digital signature portion; and 

a security parameter index portion identifying a secret 
and an identified algorithm to be used by a digital rights 
client for interpreting at least the digital signature por- 
tion. 

[cH] 11. A digital rights key according to claim 10, wherein 
the permission information of the digital rights key is in 
clear text. 

[d2] 12.A digital rights key according to claim 10, wherein 

the permission information of the digital rights key com- 
prises a destination identifier. 

[d3] 13. a digital rights key according to claim 10, wherein 
the permission information of the digital rights key com- 
prises a feature ID and a number of feature units. 

[d4] 14. a digital rights key according to claim 10, further 
comprising XML tags adjacent to the permission infor- 
mation portion, the digital signature portion and the se- 
curity parameter index portion to identify individual ele- 
ments of the digital rights key. 

[d5] 15. a digital rights key according to claim 14, wherein 



the XML tags comprise: 

a permission information portion begin tag and a per- 
mission information portion end tag at respective ends 
of the permission information portion; 
a digital signature portion begin tag and a digital signa- 
ture portion end tag at respective ends of the digital sig- 
nature portion; 

a security parameter index portion beginning tag and a 
security parameter index portion end tag at respective 
ends of the security parameter index portion; and 
a key begin tag and a key end tag, at respective ends of 
the key, and encompassing said permission information 
portion begin tag and the permission information por- 
tion end tag, said digital signature portion beginning tag 
and the digital signature portion end tag, and said secu- 
rity parameter index portion beginning tag and the se- 
curity parameter index portion end tag. 

[d6] 16. A digital rights source for encoding a digital rights 

key, the digital rights key having permission information, 

a OLE_LINKlsecurity parameter index OLE_LINKland a 

signature, the digital rights source comprising: 

a selector for selecting a security parameter index 

among a plurality of security parameter indexes; 

a digital signature calculation block operatively coupled 

to the selector to receive the selected security parameter 



index and to calculate a digital signature using the se- 
lected security parameter index and permission informa- 
tion; and 

an assembler operatively coupled to the digital signature 
calculation block to assemble the digital rights key using 
the calculated digital signature and permission informa- 
tion. 

[d7] 17. a digital rights source according to claim 16, 

wherein the digital rights key has permission information 
in clear text; and 

wherein the assembler assembles the digital rights key 
using at least the clear text permission information; and 
wherein the digital signature calculation block calculates 
the digital signature using at least the clear text permis- 
sion information. 

[d8] 18. A digital rights source according to claim 16, 

wherein the permission information of the digital rights 
key comprises a destination identifier; and 
wherein the assembler assembles the digital rights key 
using at least the destination identifier. 

[d9] 19. a digital rights source according to claim 16, 

wherein the permission information of the digital rights 
key comprises a feature ID and a number of feature 
units; and 



wherein the assembler assembles the digital rights key 
using at least the feature ID and a number of feature 
units. 

[c20] 20. A digital rights source according to claim 16, 

wherein the permission information of the digital rights 
key comprises a type designation; and 
wherein the assembler assembles the digital rights key 
using at least the type designation. 

[c21] 21. A digital rights source according to claim 16, 

wherein the Assembler comprises an XML encoder oper- 
atively coupled to the digital signature calculation block 
and to receive the permission information to provide 
XML tags surrounding the permission information and 
the digital signature to produce at least one digital rights 
key. 



